PkgRadar

npm · registry.npmjs.org

@playkit-js/kaltura-player-js

Large Javascript Payload: 2539918 bytes

Why PkgRadar flagged 3.17.85-canary.0-f79b8a3

SeveritySignalEvidence
mediumLarge Javascript Payload2539918 bytes · package/dist/kaltura-ovp-player.js
mediumLarge Javascript Payload2515086 bytes · package/dist/kaltura-tv-player.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.17.85Low risk02026-06-04
3.17.86-canary.0-ef0bbd5Low risk02026-06-04
3.17.85-canary.0-ecd6656Low risk02026-06-02
3.17.85-canary.0-f8e0ea8Low risk02026-06-01
3.17.85-canary.0-fc7b788Low risk02026-05-31
3.17.85-canary.0-f79b8a3Review102026-05-28
3.17.85-canary.0-d359328Review102026-05-27
3.17.85-canary.0-8bcad19Review202026-05-25
3.17.85-canary.0-f3932a3Review202026-05-25

Block this in CI

PkgRadar gates @playkit-js/kaltura-player-js (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @playkit-js/[email protected]